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mined control signal on a control line. The control line is 
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predetermined period of time. 



(51) int. Cl 6 : H04L 29/14, H04L 12/413 



(72) Inventors: 

• Martin, Jean-Christophe 
38760 Varces (FR) 

• McKinty, Steve 
38570 Theys (FR) 

(74) Representative: 

de Beaumont, Michel 
1, rue Champollion 
38000 Grenoble (FR) 



< 

CO 

O 
O 
CL 




Fig 2 




EP 0 949 



Description 

[0001] The present invention relates to a device for 
bypassing a computer system interconnecting two net- 
work links when this computer system fails. s 
[0002] It is often desirable to insert, between two sys- 
tems interconnected through a network link, a transpar- 
ent control system for various possible purposes. The 
control system may be used for restricting access, for 
event logging, for ciphering and deciphering... w 
[0003] Figure 1 schematically shows an arrangement 
providing this functionality. A system A normally com- 
municates with a system B over a network link, such as 
an Ethernet link. A control system C is inserted in the 
network link between systems A and B. In other words, 15 
system A is coupled to a network interface card 10 of 
system C through a network link ethA, while system B is 
coupled to a second network interface card 11 of sys- 
tem C through a network link ethB. 

[0004] System C, usually a work station, is supposed 20 
to be transparent for systems A and B as regards the 
network frames exchanged between them. For this pur- 
pose, system C executes software which copies the 
frames between links ethA and ethB. In fact, it mainly 
operates as a hub. In some cases, however, the soft- 25 
ware may analyze the frames or even perform opera- 
tions thereon. 

[0005] Of course, system C is subject to failure.. In 
case of failure, it is desirable to maintain the link 
between system A and system B. For this purpose, it is 30 
known to use bypass devices which are capable of 
detecting a hardware failure, for example by achieving 
CRC checks on the frames, in order to switch the net- 
work links to bypass links. 

[0006] However, such devices are not able to detect a 35 
software failure, such as an abnormal program termina- 
tion or a system hang. Indeed, in this case, the frames 
do not have errors, they are simply not copied from one 
link to the other. 

[0007] An object of the present invention is to provide 40 
a bypass device capable of achieving its function in 
case of a software failure of a control system. 
[0003] This object and others are achieved by execut- 
ing on the transparent system a software which pro- 
vides a predetermined control signal on a control line. 45 
The control line is polled by the bypass device. The 
bypass device will bypass the transparent system when 
the control signal is not present on the control line. 
[0009] According to a preferred embodiment of the 
invention, the control signal is in the form of periodic so 
pulses and a bypassing is caused when a pulse is not 
received on the control line within a predetermined 
period of time. 

[0010] The bypass device includes a switch having a 
first position selecting a main path between first and 55 
second network links, including the transparent system, 
and a second position selecting a bypass path between 
the first and second network links. A control circuit 
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selects the first position of the switch when the control 
signal is received on the control line, and selects the 
second position of the switch when the control signal is 
not received on the control line. 

[0011] The foregoing and other objects, features, 
aspects and advantages of the invention will become 
apparent from the following detailed description of 
embodiments, given by way of illustration and not of lim- 
itation with reference to the accompanying drawings. 

Figure 1, previously described, shows a conven- 
tional arrangement including a transparent control 
system inserted in a network link; 
Figure 2 shows an embodiment of a network 
bypass device according to the invention; and 
Figure 3 shows another embodiment of a network 
bypass device according to the invention. 

[0012] A network bypass device according to the 
invention is intended to reestablish the network link 
between systems A and B of figure 1 in case of a soft- 
ware failure in transparent control system C. 
[0013] Figure 2 schematically shows an embodiment 
of such a device The device 20 is connected between 
control system C and the two network links ethA and 
ethB. It includes a double switch 22 which, in a first and 
normal position, connects network link ethA to network 
interface card 10 of system C and connects network link 
ethB to network interface, card 1 1 of system C. Thus, in 
its normal position, switch 22 connects system C to the 
network links ethA and ethB exactly as in figure 1 . 
[0014] In a second, bypass position, shown in dotted- 
lines, switch 22. connects- network links ethA and ethB 
directly the one to the other through a link 24. 
[0015] Switch 22 is operated by a control circuit 26 
which is coupled to system C through a control line 28. 
[0016] The software executed by system C is adapted 
to provide a specific control signal on line 28. As long as 
this control signal is present on line 28, control circuit 26 
selects the normal position of switch 22, so that the traf- 
fic on links ethA and ethB normally passes through sys- 
tem C. 

[001 7] In the case of a software failure, the software is 
no longer capable of providing the control signal on line 
28. Control circuit 26 detects the absence of the control 
signal and, as a consequence, selects the bypass posi- 
tion of switch 22, directly interconnecting links ethA and 
ethB through link 24. 

[0018] The control signal generated by the software 
on line 28 is, for example, in the form of periodic pulses. 
Control circuit 26 then includes a timer which restarts 
counting down a time-out period at each arrival of a 
pulse. If a pulse does not arrive because of a software 
failure, the timer reaches the time-out period and 
selects the bypass position of switch 22. 
[001 9] Of course, if the hardware of system C fails, the 
software will also fail in many cases, whereby the device 
according to the invention will also perform its bypass 
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function. 

[0020] In a preferred embodiment, as shown, the 
bypass device 20 is external to system C. Device 20 is 
then included in a housing provided with standard con- 
nectors 30 which directly receives the network links 5 
ethA and ethB and enable system C to be coupled to 
device 20 through standard cables. Control line 28 is 
then any externally available standard link, such as a 
serial RS232 link, as shown. It is particularly simple to 
send any specific signal on a standard serial link by soft- w 
ware. 

[0021 ] An RS232 link has the additional advantage of 
providing supply voltages, which may be used for pow- 
ering the bypass device 20. However, an independent 
powering of the bypass device will allow the device to ?5 
continue operating even if system C has a power failure. 
[0022] Figure 3 shows another embodiment of a net- 
work bypass device according to the invention, here 
designated by 20*. In figure 3. same elements as those 
in figure 2 are designated with same reference charac* 20 
ters. 

[0023] One difference of this embodiment with respect 
to that of figure 2 is that the direct bypass link 24 of fig- 
ure 2 is replaced by two connectors 32 which are 
respectively internally connected to links ethA and ethB 25 
through switch 22 when it is in its bypass position (dot- 
ted lines). 

[0024] Each of connectors 32 is intended to be cou- 
pled to a respective network interface card of a second, 
backup system C which performs the same functions as 30 
system C. 

[0025] With this arrangement, when main system C 
fails, bypass device 20' interconnects network links ethA 
and ethB through backup system C. This embodiment is 
particularly useful if system C performs important secu- 35 
rity functions. 

[0026] Of course backup system C may be replaced 
by a direct external link between connectors 32, 
whereby the device will operate as that of figure 2. 
[0027] In some cases, network interface cards are 40 
connected to their respective links through transceivers 
which adapt the physical interface of the network cards 
to the characteristics of the network links. A bypass 
device according to the invention, as shown in figure 3, 
may advantageously include such transceivers. As 45 
shown, the transceivers 34 are inserted between switch 
22 and respective connectors 30. 

Claims 

50 

1. A device for interconnecting a first network link 
(ethA). a second network link (ethB) and a compu- 
ter system (C) that transfers information between 
the first and second network links under the control 
of a software executed by the computer system, 55 
characterized in that it includes: 

a switch (22) having a first position selecting a 



main path between the first and second net- 
work links, including said computer system, 
and a second position selecting a bypass path 
between the first and second network links: 
and 

a control circuit (26) for selecting the first posi- 
tion of the switch when a predetermined control 
signal is received on a control line (28) coupled 
to said computer system, and for selecting the 
second position of the switch when the prede- 
termined control signal is not received on the 
control line; 

wherein said software is adapted to provide the 
predetermined control signal on the control 
line. 

2. The device of claim 1, wherein said predetermined 
control signal is in the form of periodic pulses, the 
control circuit being arranged to select the second 
position of the switch when a pulse of the control 
signal has not been received within a predeter- 
mined period of time. 

3. The device of claim 1, wherein the control line is a 
standard serial link between the device and the 
computer system. 

4. The device of claim 1, wherein said bypass path 
includes a direct link. 

5. The device of claim 1, wherein said bypass path 
includes a backup computer system. 

6. The device of claim 1 . included in an external hous- 
ing and comprising: 

first and second connectors for respective con- 
nection to the first and second network links; 
third and fourth connectors in said main path 
for respective connection to two network inter- 
face cards of the computer system; and 
a fifth connector for connection of the control 
line. 

7. The device of claim 6. comprising sixth and seventh 
connectors in said bypass path for respective con- 
nection to two network interface cards of a backup 
computer system. 

8. The device of claim 6, wherein said main path 
includes a transceiver connected to each of the 
third and fourth connectors inside said housing. 

9. A method for bypassing a computer system (C) 
coupled between first and second network links 
(ethA, ethB), characterized in that it includes the 
steps of: 
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executing in said computer system a software 

which provides a predetermined control signal 

on a control line; 

polling the control line; and 

bypassing the computer system when said s 

control signal is not present on the control line. 

10. The method of claim 9, wherein said control signal 
is in the form of periodic pulses and the step of poll- 
ing includes expecting a pulse on the control line i 
within a predetermined period of time. 
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Figl 
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